angle heap overflow

Google’s CVE-2026-5275 is the kind of browser flaw that instantly jumps to the top of any patching queue: a heap buffer overflow in ANGLE that can be triggered by a crafted HTML page and, on affected Mac builds, could permit remote code execution before Chrome 146.0.7680.178. Microsoft’s...

Google’s Chrome security team has patched a serious heap buffer overflow in ANGLE, tracked as CVE-2026-4448, in Chrome 146.0.7680.153 and later. The flaw could let a remote attacker trigger heap corruption through a crafted HTML page, which makes it especially important because the attack...